uvm_fault(0xffffef806fd5ecf8, 0x4000, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at art_iter_open+0x3b: movq 0(%rax),%rcx
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*495809 72932 0 0 0x4000000 0 syz-executor
art_iter_open(ffff8000015a1e80,ffff80002a84e9f0) at art_iter_open+0x3b art_heap_to_table sys/net/art.h:100 [inline]
art_iter_open(ffff8000015a1e80,ffff80002a84e9f0) at art_iter_open+0x3b art_iter_descend sys/net/art.c:675 [inline]
art_iter_open(ffff8000015a1e80,ffff80002a84e9f0) at art_iter_open+0x3b sys/net/art.c:717
rtable_walk(18,21,ffff80002a84eaa0,ffffffff83364a90,ffff8000015fb800) at rtable_walk+0x101 sys/net/rtable.c:-1
rt_if_track(ffff8000015fb800) at rt_if_track+0x12b sys/net/route.c:1898
if_down(ffff8000015fb800) at if_down+0x1dc if_linkstate sys/net/if.c:1891 [inline]
if_down(ffff8000015fb800) at if_down+0x1dc sys/net/if.c:1835
ifioctl(ffff80000159f370,80206910,ffff80002a84ee90,ffff80002a76a7e8) at ifioctl+0x24d2 sys/net/if.c:2336
fifo_ioctl(ffff80002a84ecd8) at fifo_ioctl+0x8e sys/miscfs/fifofs/fifo_vnops.c:308
VOP_IOCTL(ffffef806b56f6f8,80206910,ffff80002a84ee90,f,ffffef8007ffd750,ffff80002a76a7e8) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(ffffef806d1ada50,80206910,ffff80002a84ee90,ffff80002a76a7e8) at vn_ioctl+0xea sys/kern/vfs_vnops.c:537
sys_ioctl(ffff80002a76a7e8,ffff80002a84f060,ffff80002a84efb0) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff80002a84f060) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a84f060) at syscall+0x962 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3bde992c670, count: 4
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffef806fd5ecf8, 0x4000, 0, 1) -> e
ddb> show kasan
No such command
ddb> trace
art_iter_open(ffff8000015a1e80,ffff80002a84e9f0) at art_iter_open+0x3b art_heap_to_table sys/net/art.h:100 [inline]
art_iter_open(ffff8000015a1e80,ffff80002a84e9f0) at art_iter_open+0x3b art_iter_descend sys/net/art.c:675 [inline]
art_iter_open(ffff8000015a1e80,ffff80002a84e9f0) at art_iter_open+0x3b sys/net/art.c:717
rtable_walk(18,21,ffff80002a84eaa0,ffffffff83364a90,ffff8000015fb800) at rtable_walk+0x101 sys/net/rtable.c:-1
rt_if_track(ffff8000015fb800) at rt_if_track+0x12b sys/net/route.c:1898
if_down(ffff8000015fb800) at if_down+0x1dc if_linkstate sys/net/if.c:1891 [inline]
if_down(ffff8000015fb800) at if_down+0x1dc sys/net/if.c:1835
ifioctl(ffff80000159f370,80206910,ffff80002a84ee90,ffff80002a76a7e8) at ifioctl+0x24d2 sys/net/if.c:2336
fifo_ioctl(ffff80002a84ecd8) at fifo_ioctl+0x8e sys/miscfs/fifofs/fifo_vnops.c:308
VOP_IOCTL(ffffef806b56f6f8,80206910,ffff80002a84ee90,f,ffffef8007ffd750,ffff80002a76a7e8) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(ffffef806d1ada50,80206910,ffff80002a84ee90,ffff80002a76a7e8) at vn_ioctl+0xea sys/kern/vfs_vnops.c:537
sys_ioctl(ffff80002a76a7e8,ffff80002a84f060,ffff80002a84efb0) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff80002a84f060) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a84f060) at syscall+0x962 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3bde992c670, count: -11
ddb> show registers
rdi 0xffff8000015a1e80
rsi 0xffff80002a84e9f0
rbp 0xffff80002a84e9e0
rbx 0x18
rdx 0
rcx 0x18
rax 0x4000 __ALIGN_SIZE+0x3000
r8 0xffff8000015fb800
r9 0x8080808080808080
r10 0xfdd436f893e8711c
r11 0x26043041fb6d5e0e
r12 0xffff80002a84eaa0
r13 0xffffffff83364a90 rt_if_linkstate_change
r14 0xffff80002a84e9f0
r15 0xffff8000015a1e80
rip 0xffffffff82cd5d4b art_iter_open+0x3b
cs 0x8
rflags 0x10206 __ALIGN_SIZE+0xf206
rsp 0xffff80002a84e9b0
ss 0x10
art_iter_open+0x3b: movq 0(%rax),%rcx
ddb>